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The "wtiar and "how" of policy-based management is 
integrated in a single framework that enables a system 
administrator to specify service-level quality of service 
(QoS) goals for automatic enforcement. Automatic enforce- 
ment of the specified "high-level" QoS goals is realized 
through the execution of "low-level" rule-based or proce- 
dural logic, without the client having to specify the low level 
logic. Specifically, one embodiment of the invention 
employs a management server including a graphical mter- 
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logic needed to enforce those gods. The "how" otentOTci^ 
the goaJs is specified by the policy logic contained in the 

example of policy logic is given in TABLE 2 of FIG. 2. 
ne .s ue^ermnieu ,^ ^ greater Luau one seconu. ^ embodiment of the invention there is an expHcit 

.^„?±L^!^^f,'!:£nSr'^fi°r^^^^^ dis.inc.ionbetween.he"wharattd"hoWofPBMandeach 



Ltisfled whenever Joe's SAP av 



c. Spedflcally, shown in TABLE 2 is 
pseudocode tor one possible (shnplistic) procedure for 
enforcing the above QoS goal in a networked system with 



1 integral pa 
solution which enables the following: 



priority-based paclcet switching and a function defined as Directly specifying (and modifying on-Une) clients' 
getClientQoS( ) that measures or computes a client's trans- service-level QoS goals as part of the network man- 
action delay. The example pseudocode is explained as agement objective; 

folbws. The "if" condition in line 1 is satisfied when the Easily reporting and verifying the efEectiveoess of policy- 
delivered QoS for client C using service S does not satisfy based management for achieving these goals; 
the QoS expression of the goal specified for client C and Providing feedback so that policy logic can be modified, 
services. Line 3 specifies an example action that is expected either manually offline or automatically on-line to 

;ve desired OoS goals; 

priority lor networlc traffic is increased, tor traffic generated ^„ xrviLh^lTgreemen^'iSLA'sfblTd o'n golkand 

by client C accessing service S. Lines 5 through 10 specify objectives that are mumally understood. As an integral 

a rule of the form "if condition then action" simUar to those part of the pohcy specification, such SLA's enable an 

cominonly supported by existing PBM arrangements and by SLA-based revenue model for service providers, as 

the condition part of the rule identifies that a given packet P 25 norm for service provider. ^ ^ ^ 

example is setting the appropriate priority for switching and sto™''are iBanag^metrsever"^ embodiment 

queuing the packet at network elements. Line 4 indicates ^veDtion, an associated graphical user interface 302, 

that this policy rule should be enforced at each element in 30 g^ai repository 304, and monitored state repository 305. 

the network over which client C accesses service S. Management server 301 is controllably connected to a data 

It is noted that such a procedure can be specified by a communication network 306, for example, the internet or 

management expert in advance and reused for a number of World Wide Web (the Web),' that includes' a set of one or 

different goal parameters, i.e. for diffisrent dienls, services, more configurable QoS-enabled network elements 307-1 

QoS metrics, etc. Indeed, the procedural policy specification 35 through 307-N. A set of service servers 308-1 through 308-X 

is highly dependent on the types of parameters assigned to is also controllably connected to data communications net- 

the QoS goal template, and on the types of elements in the work 306. Finally, a set of client stations 309-1 through 

networked system that can be controlled in order to enforce 309-Y is also controllably connected to data communica- 

QoS. tioDS network 306. It is noted that cUent stations 307 may 

It IS feh best to consider some terminology. Thus, a 40 each be a personal computer (PC), workstation or the like for 
"policy" is defined to be a process that implements a accessiogdatacommunicationnetwork306,i.6.thelntem6t. 
funchon with a parameter called an "objective." An "objec- In this example, configurable QoS-enabled network ele- 
tive" IS defined to be a Boolean expression over some set of ments 3*7 may include network routers and switches, net- 
goals. A goal IS a pruposrlion defined as above on (1) a wodc traffic shapers, application-level traffic redirectors, and 
■■service , i.e. an .ipplicaiion. (2) a -client" that accesses the 45 application-level or network-level load balancers; the ser- 
service, (.1) a iiiiic laimc liir goal enforcement, and (4) a vice servers 308 may include file servers (e.g. NFS), data- 
"QoS -expression spcciliod using applicable metric base servers, naming servers (e.g. DNS), network directories 
identifiers, operators, and values. Agam, an example goal (e.g. LDAP), enterprise resource planning software, or serv- 
proposition IS as fallows: Chent-Joe, Service-SAP, Time- ers rung any other networked application; and the clients 
Always and TransactionDelay^l ms. A "policy instance" 50 309 may include thin client terminals, personal digital 
P(H) exists whenever objectnre H is enforced using policy P. 
The mpuls to a pohcy instance are state updates of the client, 

service, and network elements that allow the client to access computers or workstations, 

the service, and its outputs are a combination of (1) policy nO. 4 is a flow chart ill 

rules consumed by rule-based PBM software, (2) control 55 employed in an embodiment o 

signals sent to network elements and resources to affect the started in step 401. At run time, 

client's QoS, aod/or (3) notifications sent to a administrative like employing user interface 302 defines a service level 

interface, including but not hmited to service-level alarms QoS goal by selecting a client from 309-1 through 309-Y, an 

An embodiment of the invention allows the user (system 60 a'ooS expression. Stated another way, user^nterface' 302 

goal repository, describing the "what" of the service-level for an objective "H" and choose when attempted enforce- 

QoS management. For each goal G in some objective H meat of "H" should begin. At that time management server 

specified, a pohcy is automatically selected such that the 301 parameterizes and mstantiates P(G) for each goal G that 

effect of executing P(G) is to enforce goal G to the extent 65 is part of objective H, such that the policy logic of P is 

that is feasible given the available networked resources. appropriate for enforcing goal O. For example, the policy 

Thus, the invention accepts only a limited set of goals for logic described in simplified form in FIG. 2 could be 
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Thereafter, in this example, three processes run concnircnUy 
in management server 301. Specifically, a first sub-process 
includes maintaining the goal repository 304, a second 
sub-process maintains the monitored state repository 305 5 
and a third sub-process effects the QoS management of 
defined goals. Again, these three sub-processes, once started, 

level QoS goal. Then, step 403 testes to determine whether 
the contents of goal repository 304 should be modified. If the 
test resuh in step 403 is YES, controf is renirned to step 402 
that causes the updating of goaf repository 304. ff the test 
resuft in step 403 is NO, the test is iterated untii a TCS result 
is obtained and controf is again remmed to step 402. Steps 
402 and 403 are continuousfy iterated, as descri 

lory 305 includes step 404 that tests t< 



ontrof is passed to step 414 that 



408 through 418 an 
0 computations perfc 
steps 404, 410, 417 



employing a so-called VitalAgent client-side m( 
software commercially available from Lucent Tect 
Inc. See for example, http://www.Lns.com/softv 



the test result in step 407 is YLS, then step 406 c; 

Ofterwise, if the test result in step 407 is NO. the ( 
returned to step 404. Returnina to step 404. it the ti 
is NO, no update is requested and control is passe 
407. Appropriate ones of steps 404 through 407 an 
continuously. 

The third sub-process of eftectine the desired Q 



. of the invention. Indeed, numer- 
aratus may be devised by those 
;parting from the spirit and scope 



work havmn one or more network resources comprising the 

enablins; a system adminislralor to specify predefined 

service level goals for said computer network; 
specifying a prescribed quality of service goal for a 

prescribed cheat and prescribed service; 
executmg policy goal-logic to automatically enforce said 

specified qualiiv of service gpal, wherein said policy 

gpal-logic IS comprised in 



momtormg a dehvered quality of service for said specified 
quahiv of service goal being executed by said policy 
gpal-logic, said momtoring a delivered quality of ser- 



id said prescribed service; 
itermining it said delivered quafity of service is different 
than said specified quafity of service goal; and 
so. said pohcv goal-logic executing prescribed actions 



ne(l). 



iting that the dehvered QoS sa 
Then, step 414 causes counter 



nted bv 



er of QoS goafs in goal d( 
repository 304. ff the test resuh in step 415 is YES. controf 
is returned to step 408 and steps 408 through 415 are iterated 
until either step 412 or step 415 vields a NO nxull. If step 
415 yields a NO result, control is relurnal It) step 409 and 
steps 409 though 415 are iterated untif step 412 yields a no 6; 
result or step 415 yields a YES result. If step 412 yields a NO 
result, control is passed to step 416. Step 416 tests to 



specify said prescribed actions to said poficy goal-logic 
mtended to enforce said specified quality of service 

2. The method as defined m claim 1 wherein said step of 
letermirung if said dehvered quality of service is different 
includes a step of determining if said dehvered quality of 
service exceeds said specified quality of service goal and, if 
io, said step of executing mchides steps of detennimng and 
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as defined in claim 2 fu 



executing policy goal-logic to determine if said delivered 
quality ot service is different includes a step of determining 
if said deUvered quaUty of service is worse than said 



;nt and said prescribed sei 




as defined in claim 1 fiirther including the ^ 
steps of storing said specified quality of service goals and 
determining whether said stored quality of service goals 
should be updated. 

9. The method as defined in claim 8 further including a 
step of updating said stored quality of service goals. . 

10. The method as defined in claim 9 wherein each of said 
quality of service goals is a service level quality of service 



removing a stored ser 
12. The method as 
steps of monitoring a e 




22. The method as defined in daim 21 further including 
a step of reportmg to said system administrator results of 
executing said actions. 

" use in a policy goal-based management 
rvice level goals for a computer networic 
network resources comprising: 

specify 



Is for : 



of each network i 
and storing said updated : 



means for executing policy goal-logic to automatically 
enforce said ^edfied quality of service goal, wherein 
said policy goal-logic is comprised in a general purpose 

means for monitorii^ a delivered quality of service for 
said specified quality of service goal being executed by 
said policy goal-logic, inchiding m 



said set of network i 

15. The method as defined : 
of monitoring said state of each network 
includes steps of 

indicating a diange in state of a network 
storii^ said indicated chan^ of state of 
resource as an update of the stat 

16. The method as defined in 




wherein said step of specifying a prescribed quality of 
service goal includes selecting said prescribed defined 

quality of se 

wherein said step of monitoring a delivered quafity ol 
service includes a step of using said stored monitored 



^ said policy goal-logic, b 
to said deUvered is quality of serv:"" ' 
3 cause said police goal-logic tc 
prescribed actions regarding network n 
ass^ned to said client for said prescribed s£ 
wherein said actions are intended to adju^ said 
ered quality of service toward being equal tt 
specified quality of service ©sal, 
wherein said police goal-action executes said pres 



» goals for a prescribed client and 
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